Skip to content
OpenAdvisories

Vendor

ZTE

131 known vulnerabilities.

Products

GoldenDB 13 ZXCLOUD iRAI 11 ZXHN F670 7 Z80 Ultra 5 SmartLife 5 ZXUniPOS NDS-LTE 5 F689 4 MC801A 3 MC801A1 3 ZXCLOUD GoldenData VAP 3 E8820V3 2 MU5250 2 ZTE MF920 2 ZX10 1800-2S 2 ZTE WF820+ LTE Outdoor CPE 2 T5400 2 ZXHN H168N 2 ZXUPN-9000E 2 ZXR10 1800-2S 2 ZXCDN IAMWEB 2 C520V21 2 ZXDU68 S202 V5.0 1 MF258 1 ZX297520V3 1 F50 1 Red Magic 8 Pro 1 ZXUN-ePDG 1 ZTE PROCESS Guard service 1 OX-330P 1 Some ZTE Mobile Phones 1 MF258K 1 Mobile Internet Products 1 F6x2W 1 ZTE Z80 Ultra 1 MF286R 1 OTCP 1 NX799J (Red Magic 11 Air) 1 NebulaOS 1 NetNumenU31R20 1 ElasticNet RNIA R18 NGI 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-49003

    Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product

    Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby ta…

    ZTE ZXDU68 S202 V5.0
  • Critical 9.1
    CVE-2026-49002

    Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product

    Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond their permissions, such as viewing and modifying configuration information.

    ZTE ZXUniPOS NDS-LTE
  • Critical 9.8
    CVE-2025-46581

    ZTE ZXCDN product has a Struts RCE Vulnerability

    ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges.

    ZTE ZXCDN
  • Critical 9.8
    CVE-2019-3412

    All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interf…

    ZTE ZTE MF920
  • Critical 9.0
    CVE-2019-3409

    All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnera…

    ZTE ZTE WF820+ LTE Outdoor CPE
  • Critical 9.0
    CVE-2018-7359

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, whic…

    ZTE ZXHN F670
  • Critical 9.6
    CVE-2018-7360

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may …

    ZTE ZXHN F670